Why don't we want to force ssl?